StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,343
of 17,790 indexed, latest versions
Container images
1,662
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,343 of 17,790 indexed charts deploy, on 1,662 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,662
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,343 by stars
ChartLatestAffected imagesRadar Score
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,684
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,835
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,854
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,797
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,001
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,766
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

6,587
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,052
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,206
clickhousesignoz24.1.182 of 3See more

clickhouse signoz 24.1.18

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
google.golang.org/protobuf@v1.26.0
1.33.0
altinity/metrics-exporter:0.21.2df3d57215356
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

4,697
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
google.golang.org/protobuf@v1.28.0
1.33.0
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

5,118
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
google.golang.org/protobuf@v1.26.0
1.33.0
altinity/metrics-exporter:0.20.01a46d104406d
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,420
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

7,684
smarter-edgesmarterOfficialVerified publisher0.0.151 of 1See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,144
yopasssoftizyVerified publisher1.0.11 of 2See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jhaals/yopass:11.4.69516e3b3e88c
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,461
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

14,504
go-ratelimitsoftonic1.0.71 of 3See more

go-ratelimit softonic 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.9.04af75e9f16f6
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

5,098
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.9.04af75e9f16f6
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,320
gloosolo-gloo-edge0.0.0-fork4 of 5See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/solo-io/gloo-envoy-wrapper:0.0.0-fork26ae185e835a
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

9,224
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,022
sql-operatorsql-operatorOfficialVerified publisher0.11.21 of 1See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,594
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

11,459
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

4,673
mayastorstartechnicaVerified publisher0.2.03 of 13See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
google.golang.org/protobuf@v1.28.0
1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
google.golang.org/protobuf@v1.28.0
1.33.0
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,348
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,371
hlf-k8ssubstraVerified publisher10.2.42 of 7See more

hlf-k8s substra 10.2.4

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.0f270dfeee91d
google.golang.org/protobuf@v1.23.0
1.33.0
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

12,006
hello-appsysintelligentVerified publisher2.0.11 of 1See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
sysintelligent/hello-app:2.0.177fb30df847d
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,880
terraform-controllerterraform-controller0.0.201 of 1See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
absaoss/terraform-controller:v0.0.20ad538a1285a0
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,538
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,469
spa-reloadertoucanVerified publisher0.1.01 of 1See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
toucansoftware/spa-reloader:latestc187b1fba501
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,245
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,165
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

5,280
boundaryundergridVerified publisher0.1.01 of 3See more

boundary undergrid 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hashicorp/boundary:0.8.1fb70bd9210ff
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,957
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,461
v2ray-proxyv2ray-proxy0.2.41 of 1See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
pinclr/v2ray-proxy:latestf37f250b7091
google.golang.org/protobuf@v1.28.2-0.20220831092852-f930b1dc76e8
1.33.0

Open the chart page →

1,954
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
vearch/vearch:3.3.40768af33f9d9
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

5,008
vultr-ccmvultrVerified publisher1.3.01 of 1See more

vultr-ccm vultr 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,034
frpswenerme1.0.11 of 1See more

frps wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wener/frps:v0.37.05c92cc9e8597
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

3,359
wharf-ainowharf-helmVerified publisher0.1.55 of 7See more

wharf-aino wharf-helm 0.1.5

5 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

13,461
wharf-cmdwharf-helmVerified publisher0.3.31 of 1See more

wharf-cmd wharf-helm 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,428
external-monitoringwiremindVerified publisher0.3.01 of 1See more

external-monitoring wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,293
kubemodwiremindVerified publisher0.1.51 of 2See more

kubemod wiremind 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubemod/kubemod:v0.13.0cadca39288ad
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

3,030
workflows-informerworkflows-informerVerified publisher0.4.41 of 1See more

workflows-informer workflows-informer 0.4.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,154
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

10,131
redis-db-assignment-operatorwyrihaximusnetVerified publisher1.0.61 of 1See more

redis-db-assignment-operator wyrihaximusnet 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,235
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,829
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,915
msockperfaetrius2.0.81 of 2See more

msockperf aetrius 2.0.8

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

4,237
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
google.golang.org/protobuf@v1.29.0
1.33.0

Open the chart page →

1,716
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,547

Container images carrying it

1,662 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
google.golang.org/protobuf@v1.30.0
1.33.0
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
google.golang.org/protobuf@v1.26.0
1.33.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
google.golang.org/protobuf@v1.27.1
1.33.0
1
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/aerokube/keygen:1.0.1578934444f04
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/aerokube/moon:2.5.1a8837b00ba1c
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/aerokube/moon-conf:2.5.19ca307b30080
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/argoprojlabs/argocd-extension-metrics:v1.0.30d614816c4b7
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/cilium/tetragon-operator:v0.8.34ab8e6604204
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
google.golang.org/protobuf@v1.30.0
containers-common@2:1-64.module+el8.8.0+18571+eed59fc4
criu@3.15-4.module+el8.8.0+19044+f9982fd8
fuse-overlayfs@1.11-1.module+el8.8.0+18634+9a268292
libslirp@4.4.0-1.module+el8.8.0+18060+3f21f2cc
runc@1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
skopeo@2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c
slirp4netns@1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.33.0
2:1-81.module+el8.10.0+21962+8143777b
0:3.18-5.module+el8.10.0+21962+8143777b
0:1.13-1.module+el8.10.0+21962+8143777b
0:4.4.0-2.module+el8.10.0+21962+8143777b
1:1.1.12-1.module+el8.10.0+21974+acd2159c
2:1.14.4-1.module+el8.10.0+21995+81e8507c
0:1.2.3-1.module+el8.10.0+21962+8143777b
1
quay.io/coreos/etcd:v3.5.11842975891182
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/evl.ms/pgbouncer-exporter:0.4.074f919b78494
google.golang.org/protobuf@v1.23.0
1.33.0
1
quay.io/evryfs/github-actions-runner-operator:v0.11.16b084e0bd082
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/fiware/vcverifier:6.21.15f9aa6a9c385
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
google.golang.org/protobuf@v1.27.1
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.